AMENDMENTS TO THE SPECIFICATION 

Please replace the paragraph beginning on page 2, line 14 and ending on 
page 2, line 16 with the following amended paragraph: 

- Access to premises in emergency or potential emergency situations, such as 
by fire departments in the event of a fire alamn, usually requires forced entry [[.]] if 
nomnallv-authorized persons are not available to unlock doors, thereby causing 
structural damage and consequent repair expenses.- 

Please replace the paragraph beginning on page 3, line 1 1 and ending on 
page 3, line 24 with the following amended paragraph: 

- According to one aspect of the present invention, there is provided a 
svstem for door access control and key managemen t system i n which a numbor of 
doors and door us e r s ar e i nvolv e d . The system compr i s e s includes: ^a)-a 
commun i cat i ons n e twork; (b) (1) a door/key door administering system for storing a 
k e y uniqu e to e ach of the u se r s , administering access to one or more doors, the 
door administering svstem having: la) a module for managing access privilege of 
one or more individuals for each door and assigning access authorization to each 
individual for the door lb) a door database f or storing [[an]] a door identification 
cod e un i que uniguelv assigned to each of th e doors door and infomnation on each 
authorized individual for each door and for ass i gn i ng acooss authorization to at 
l east on e u se r for e ach door, th e door/k e y adm i ni s t e ring system b ei ng 
commun i cat i v Q ly connocted to th e commun i cat i ons notwori^: and (c) a module for 
changing data stored in the door database: (2) a kev administering svstem for 
administering one or more kevs seoaratelv from the administration of the access to 
the door each kev being uniguelv assigned to a kev owner, the kev administering 
svstem having:fd) a kev database for storing one or more kevs for each kev owner, 
and (e) a module for changing data stored in the kev database, {g) {3} a door 
l ock/contro l control/lock assembly mounted on each doo r, the door control/lock 
assembly, the door administering svstem and the kev administering svstem 
communicating with each other through a communications networi<. the door 
control/lock assembly for reading th e k e y identifying a user kev when it is p resented 
by the a use r, for verify i ng that the key has acc e ss authorizat i on , and for operating 
the door i n rosponso to based on tho authorizat i on for aeeess access privilege of the 
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user when the identified kev of the user is the key of a key owner who is an 
authorized individual having access authorization to the doo r tho door lock/control 
assomb l y being communicat i v el y connocted to the door/koy admin i ster i ng systom 
via th e communicat i ons network; (d) wh e r e by a us e r can ga i n acc es s to th e doors 
authoriz e d to tho us e r w i th a unique k e y and each door can prov i do access to th e 
u se r or u se rs ass i gn e d th e r e to ,- 



Please replace the paragraph beginning on page 3, line 25 and ending on 
page 4, line 5 with the following amended paragraph: 

- According to anoth e r a further aspect of the present invention, there is 
provided a method of contro lli ng access to a p l urality of doors by a p l ura l ity of door 
users implementing door access control and kev management via a 
communications networi<. The method compris e s includes : steps of: f1) at a door 
server, administering access to one or more doors, including: (a) managing access 
Privilege of one or more individuals for each door and assigning access 
authorization to each individual for the door: and ( a^ lb) at a door database, storing a 
unique door identification cede uniguelv assigned [[for]] to each of th e door[[s]] in-a 
s e rv e r; and infonmation on each authorized individual for each door, data stored in 
the door database being updatable: (2) at a kev server, administering one or more 
keys separately from the administration of the access to the door, each kev being 
uniguelv assigned to a key owner. including:fe ^ (c) at a key database, storing a 
uniqu e k e y s ignatur e one or more keys for each of th e u se r s i n th e s e rv e r key 
owner, the keys being implemented bv kev signatures, data stored in the kev 
database being updatable : (c) ass i gn i ng to e ach door th e uniqu e k e ys hav i ng 
access authorization to th e resp e ctiv e doors; (3) at a door control/lock assembly, 
identifying a user kev presented bv a user: frfd)11 {4) comparing a u se r' s k e y 
dotocted at th e door to th e k e ys having acc e ss authorization to the door i n th e 
s e rv e r the identified key to the kevs of the key owners and verifying that the 
identified kev is a key of a key owner who is an authorized in individual having 
access authorization to the door: ( e ) a uthorizing access to the door; and (5) 
operating the door based on the access privilege of the individual, ffl wherein the 
authorization step is canied out through the communications network between the 
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door server and the ke^ serve r and e ach user can gain acc e ss to tho doors 
authoriz e d to the us e r w i th a un i qu e k e y a nd e ach door can prov i d e acces s to th e 
user or us e rs ass i gned th e r e to ,- 

Please replace the paragraph beginning on page 4, line 6 and ending on 
page 4, line 18 with the following amended paragraph: 



~ According to another a further aspect of the present invention, there is 
provided a system architecture for controlling a p l ural i ty of door access control and 
key management syst e ms . The system architecture compris e s includes : (a) [[the]] a 
plurality of door access control and key management systems noted above, the 
systems being communicatively and operatively connected to a communication 
networi<; and (b) a Meta server being adapted to serve as an address reference 
among the door acc e ss contro l administering svstem and the kev management 
system [fsll . which are separatelv part of each door access control and kev 
management svstem . the Meta server being communicatively and operatively 
connected to each of the door access control and key management systems via the 
communications networi^, wherein the Meta server contains the address of each 
separate door acc e ss control administering svstem and key manag e m e nt 
administering system afid each with its associated unique key ID codes and unique 
door ID codes^ and each door access control and key management system contains 
the address of the Meta serve r such that anv kev owner, whose kevs are 
administered bv anv kev administrating svstem. can be granted access privileges at 
anv door which is administered bv anv door administering svstem .- 

Please replace the paragraph beginning on page 4, line 26 and ending on 
page 4, line 27 with the following amended paragraph: 



- FIGURE 1 illustrates a door access control and key management system 
with a door administering svstem and a kev administering svstem according to one 
embodiment of the present inventions- 
Please replace the paragraph beginning at page 5, line 14 and ending on 
page 5, line 23 with the following amended paragraph: 
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- Referring to Fig. 1 , the system generally comprises a door control/lock 
assembly 20, a key administering system 40, a door administering system 60. and a 
communications network 80. The door control/lock assembly 20 is mounted on each 
door and communicatively connected to the key and door administering systems 40 
and 60 via the communications network 80. In practice, the door administering 
system 60 and the key administering system 40 can be implemented as one single 
system equipped with the appropriate software program for canying out both 
functions for the convenience of people who are door administrators, who control 
doors and the access thereto, and who also have kevs authorized for access for the 
doors that they administer or for doors to which access is controlled by other door 
administrators . In general, the door control/lock assembly 20 identifies a user 32 
wanting to gain access to a door 30, and communicate with the key and door 
administering systems 40 and 60 to obtain authorization for access thereto. - 

Please replace the paragraph beginning at page 6, line 3 and ending on 
page 6, line 1 1 with the following amended paragraph: 

- The connection between the communications network 80 and the door 
l ock/oontro l control/lock assembly 20 can be accomplished via a wireless 
communication line. In such a case, an intemnediate wireless transmitter/receiver 82 
between them is provided as illustrated in Fig. 1. The means of wireless 
communication includes Bluetooth® or other short-range wireless communications 
circuitry, or a network access module consisting of Bluetooth® wireless 
communications circuitry, an Ethernet network interface and a battery backed up 
power supply. The network access module is located at an Ethemet port within the 
range of the Bluetooth® or other short-range wireless communications circuitry. - 

Please replace the paragraph beginning at page 6, line 17 and ending on 
page 6. line 30 with the following amended paragraph: 

- Fig. 2 presents a detailed view of the door control/lock assembly 20 of the 
system 10. As illustrated in Figs. 1 and 2, the door control/lock assembly 20 
mounted on each door 30 includes an electric door lock 22, an identification device 
24, an embedded controller 28, a communicating means 26, and a battery for 
supplying power. The communicating means 26 establishes two-way 
communications with the communication networic 80 via a wireless 
transmitter/receiver 82. The embedded controller 28 has appropriate software for 
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controlling the door control/lock assembly 20 and any communications with other 
system components via the communications network 80. During operation, the door 
control/lock assembly 20 transmits via the communication network the identification 
data read by the identification device 24 to the key-door administering systems 40 
and 60 and receives messages or signals from the administering systems as to 
whether the identified key is authorized. Details of the operation will be hereafter 
described. - 

Please replace the paragraph beginning at page 7, line 25 and ending on 
page 8, line 5 with the following amended paragraph: 

- In the door l ock/oontrol control/lock assembly 20, the embedded controller 28 
runs appropriate software for controlling the assembly 20 and carrying out an 
identification/authorization process by cooperating with the identification device 24 
and communicating with the door and key server systems 40 and 60 via the 
communications network 80. Various identification/authorization software 
applications are well known in the art and any suitable one can be used. The 
embedded controller 28 comprises a local database or a memory 28a as shown in 
Fig. 2. The local database or memory 28a stores, for example, data of the most 
recent and most frequent users of the door in encrypted fomn for security reasons. 
These data serve to speed up authorization process, or provides back-up capability 
in the event that the connection between the door assembly 20 and the 
administering systems 40 and 60 failed or is disrupted for any reason. - 

Please replace the paragraph beginning at page 8, line 18 and ending on 
page 8, line 30 with the following amended paragraph: 

- The door l ook/contro l control/lock assembly 20 and the door server system 
60 work together to provide a number of functions. For example, the door server 
system 60 records all uses of the door lock 22, including authorized entries and 
unauthorized attempts to enter. The door server system 60 also provides the 
necessary controls and communications capability to allow the door administrator to 
configure various security settings of the operation of the door control/lock assembly 
20, in addition to the basic authorization settings of which keys are allowed to unlock 
which doors. These security settings include such functions as to who is authorized 
at specific times. Other additional functions include settings as to who is to be 
notified in the event of an alanm of low battery condition or a detection of hardware 
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failure condition and how such notification is to take place (e.g., e-mail, pager, 
automated phone call, or the like.) Such factors as the amount of lead-time to report 
that low battery condition can also be set. - 

Please insert the following new paragraph after the paragraph beginning at 
page 10, line 1 and ending on page 10, line 6: 

- As is the situation for the door server systems and door administrators, a 
single key server system can provide these functions for a number of keys 
controlled by the same key administrator, or multiple key servers can be used. The 
same key server can also provide these functions for a number of different key 
administrators, but each key administrator is prevented from accessing the 
infomriation pertaining to keys controlled by others. Any number of key server 
systems can run on the system at the same time. - 

Please replace the paragraph beginning at page 10, line 18 and ending on 
page 1 1 , line 2 with the following amended paragraph: 

- The system of Fig. 1 provides security means to control access by persons 
to building, rooms or vehicles, while gathering useful Infomiation. The system 
provides a means for one or more door administrators to allow a person access to 
some locations, while, at the same time, excluding access to other locations, this 
may be accomplished with only one access key per Individual as defined in that 
person's kev server svstem database 42 . Such access privileges can be variable 
according to time. The system provides a means to change the security settings 
such as access privileges of an Individual quickly and easily from any location where 
an Intemet connection and browser software are available. Information gathered by 
the system includes the time of all attempts to access the door and the identification 
of the individual attempting such access (if known) or the fact that an unknown 
individual attempted to gain access. Furthemnore. the access privileges associated 
with the 'key* may be easily changed as circumstances change. This allows people 
potential to have only one 'key* to open all of the doors in their lives while, at the 
same time, increasing security and convenienc e, since each person can be their 
own kev administrator . - 

Please replace the paragraph beginning at page 1 1 , line 3 and ending on 
page 1 1 , line 19 with the following amended paragraph: 
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- To deal with the occasional instance that the communications networl< 80 is 
not available and to speed up access for frequent users of a door, a local database 
28a of frequent and most recent user authorized key signatures is stored in 
encrypted fomri in the door lock/control control/lock assembly 20 itself. Before 
sending a request message for authorization over the communications network 80 
to the door server system 60, the embedded controller 28 in the door l ock/contro l 
control/lock assembly 20 checks its own local database 28a and unlocks the door if 
a match is found between the signature of the key being presented and one that is 
stored in the local database 28a. The infomaation that this action has taken place is 
then transmitted to the door server system 60 for storage subsequent to the door 
having been unlocked. Periodically the authorized keys in the local database 28a of 
the door assembly 20 are confirmed between the door assembly 20 and the door 
server system 60 by a series of encrypted messages over the communications 
network 80. This confirmation process can be initiated by the door lock/control 
control/lock assembly 20, or the door administering system or serwer 60. If a key 
signature that has been authorized is no longer authorized, then the key signature is 
removed from the local database 28a of the embedded controller of the door 
assembly 20. - 

Please replace the paragraph beginning at page 12, line 1 and ending on 
page 12, line 7 with the following amended paragraph: 

- As well, alamn devices such as motion detectors, smoke detectors, or water 
detectors etc. can be installed in the door lock/contro l control/lock assembly 20. The 
alarm device communicates with the door server system 60, which in tum 
communicates the alarni administrator according to instructions included in the 
database 62. Any other additional alamn components can be provided and 
configured to signal their condition in various ways and to monitor multiple locations 
that can be altered easily over time. - 

Please replace the paragraph beginning at page 12, line 24 and ending on 
page 12, line 31 with the following amended paragraph: 

- The door control/lock assembly 20 can also include a digital camera (still or 
video) that is configured to provide an image of the individual attempting to gain 
access to a person assigned to make human judgomonts iudqment on whether such 
individuals, not identified by the system should be allowed access. The judging 
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person may then allow the individual in, if desired, by signalling the door control/lock 
assembly 20 from the Web browser 52. The camera may also be configured to 
record in the network databases, an image of all Individuals attempting to gain 
access. - 

Please replace the paragraph beginning at page 13, line 12 and ending on 
page 13, line 17 with the following amended paragraph: 

- Each door access control and key management system 1 1 0a or 1 1 0b 
involves a plurality of doors and door users, and includes a door l ock/contro l 
control/lock assembly mounted on each door, a door/key administering system 
comprised of a door administering svstem and a separate kev administering svstem , 
and a communications network communicatively interconnecting the door 
look/contro l control/lock assemblies and the administering system, as noted above 
in conjunction with the first embodiment of the invention of Fig. 1 . - 

Please replace the paragraph beginning at page 13, line 28 and ending on 
page 13, line 30 with the following amended paragraph: 

- Also, each door access control and key management system, i.e., each 
door/key administering system knows the location H.e. network address) of the Meta 
server 140. The administering system contains the address of the Meta server 140. 

Please replace the paragraph beginning at page 14, line 11 and ending on 
page 14, line 14 with the following amended paragraph: 

Therefore, the door access control and key management system 1 10a 
communicates with other system 1 10b via the Meta server 140 such that the system 
11 Oa can provide access to its own doors for a user or users from other system 
1 10b and whose unigue kev ID numbers are stored on the other svstem . -- 

Please replace the paragraph beginning at page 16, line 4 and ending on 
page 16, line 8 with the following amended paragraph: 

If a 'key' is lost or stolen it can be quickly and easily replaced for all its uses 
with no chance that the lost or stolen 'key' may be used by unauthorized persons. 
The replacement is effected by the kev administrator accessing the kev database 
via a browser and deleting or deactivating the unigue kev ID number associated with 
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the lost or stolen key, and adding a new unique key ID number associated with a 
replacement key. This new key is then propagated to the access control databases. 
Attempts by someone to use the lost or stolen 'key' can be reported to the key 
seryer database owned by the rightful key owner and such infomnation may be 
useful in locating the missing key and possibly in apprehending the thief. - 

Please replace the paragraph beginning at page 16, line 19 and ending on 
page 17, line 2 with the following amended paragraph: 

- The system allows the possibility for indiyiduals to haye one key that can be 
used for multiple situations, including their residences, various work situations, 
yehicles or any other places to which they may need access on a regular or 
occasional basis. These access priyileges can be altered or scheduled easily and 
quickly to apply to specific times or to adapt to changing circumstances. Such 
changing circumstances may include moving to a new house, acquiring vacation 
property, changing jobs, acquiring a new vehicle, renting a vehicle, renting a hotel 
room, temporarily accessing the house of a friend or neighbour, or losing a 'ke/. In 
the case of a lost or stolen 'key' (where biometric identification systems are not 
being used) the old key can be cancelled for all of its uses and a new 'key* can be 
authorized quickly and easily from any place where an Internet connection and 
browser software are available. Each individual can act as the door administrator 
for doors under their control, such as those in their house or car, and can act as 
their own key administrator, such that door administrators for say, their place of 
work, their friends or relatives, can grant them access to doors for which these other 
door administrators administer access privileges . - 
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